refactor: 集中显式注入并归位凭据领域规则

internal/database/controller/instance_controller.go

@@ -4,7 +4,6 @@ import (
 	"context"
 	"time"
 
-	"git.ddupan.top/panxiao81/ayatori/internal/database/adapter/kubernetes"
 	"git.ddupan.top/panxiao81/ayatori/internal/database/application"
 	ctrl "sigs.k8s.io/controller-runtime"
 	"sigs.k8s.io/controller-runtime/pkg/client"
@@ -12,27 +11,33 @@ import (
 
 type InstanceReconciler struct {
 	Client          client.Client
-	Reader          client.Reader
-	Observer        application.InstanceObserver
+	Service         *application.InstanceReconciliation
+	Presenter       InstancePresenter
 	SecretNamespace string
 }
 
+type InstancePresenter interface {
+	PresentInstance(context.Context, application.InstanceResult) error
+}
+
+func NewInstanceReconciler(cache client.Client, service *application.InstanceReconciliation, presenter InstancePresenter, namespace string) *InstanceReconciler {
+	return &InstanceReconciler{Client: cache, Service: service, Presenter: presenter, SecretNamespace: namespace}
+}
+
 // +kubebuilder:rbac:groups=database.ayatori.ddupan.top,resources=postgresqlinstances,verbs=get;list;watch;update;patch
 // +kubebuilder:rbac:groups=database.ayatori.ddupan.top,resources=postgresqlinstances/status,verbs=get;update;patch
 // +kubebuilder:rbac:groups=database.ayatori.ddupan.top,resources=postgresqlinstances/finalizers,verbs=update
 // Secret 权限单独声明为 namespace Role，不放入生成的 ClusterRole。
 
 func (r *InstanceReconciler) Reconcile(ctx context.Context, request ctrl.Request) (ctrl.Result, error) {
-	resources := &kubernetes.InstanceResources{Client: r.Client, Reader: r.Reader}
-	service := application.InstanceReconciliation{Resources: resources, Observer: r.Observer}
 	observationContext, cancel := context.WithTimeout(ctx, 15*time.Second)
 	defer cancel()
-	result, err := service.Reconcile(observationContext, request.Name)
+	result, err := r.Service.Reconcile(observationContext, request.Name)
 	if err != nil {
 		return ctrl.Result{}, err
 	}
 	// 查询超时后仍用 worker context 保存安全失败结果；manager 停止时不强行写入。
-	if err := resources.PresentInstance(ctx, result); err != nil {
+	if err := r.Presenter.PresentInstance(ctx, result); err != nil {
 		return ctrl.Result{}, err
 	}
 	if result.Record == nil || result.RemoveProtection {